Zolved community solution Createarticle_iconnew articleEditarticle_iconedit article

HP and Compaq PCs shutting down with "LSA Shell" error message.

Sasser Worm virus or its variants cause may impact any computer system running Microsoft Windows XP or Windows 2000, causing such a problem. Here, let’s learn how to resolve the error associated with the virus, remove the virus from your system, and prevent the virus from reoccurring in the future.

Note: While downloading the Microsoft Windows Update, you may notice that it takes a long time to download the updates because some worms are designed to increase the Web traffic to targeted Web sites. In such scenario, you cannot access the Web site. So, retry to connect the Web site after sometime.

Symptoms of the Sasser Worm:
  • The computer is slow and non-responsive, particularly when connected to Internet.
  • The computer may display a message stating it is shutting down, initiated by NT AUTHORITY\SYSTEM.
  • The computer may display a message stating the user does not have permission when trying to shutdown the computer normally. You will have to press and hold in the power button for seven seconds or longer to shut off the computer.

  • The computer displays an error message stating "LSA Shell (Export Version) encountered a problem and needed to close." as show below:


Prevent the computer from restarting, remove the virus, and prevent the virus from re-infecting the computer. Remember, the success of this procedure is not guaranteed because the virus may exist in different forms.You have to be logged on to Windows XP with administrative privileges and use anti-virus software to perform these actions.

Note: If your computer gets serviced or when a system recovery has been run, then the software is changed back to its original configuration like as you purchased the computer the first time. All the softwares and drivers that you have updated on your machine will be lost. If you are facing this problem perform the steps given in this section.

If you want to prevent your machine from restarting automatically as well as to download and install the Microsoft security updates then follow these steps.

  • Click Start > Run.


  • Type shutdown -a > click OK.


Now, enable a firewall. Select your Operating System to enable a Windows firewall:

   Windows XP
  
   Windows 2000

Windows XP:
  • Click Start > Control Panel.


  • Double-click on Network and Internet Connections.


  • Click Network Connections.


  • Right-click on Internet connection that needs the Internet Connection Firewall activated. Click Properties from the menu.


  • Click the Advanced tab > select Protect my computer or network. Click OK. The firewall is now activated.
  • Continue further and holding down Ctrl + Alt keys on the keyboard. Press Delete key.
Back to top

Windows 2000:
  • Right click on Task bar. Click Task Manager.

     
  • Click Process tab.

    • Select any item in the list that appears as follows:

      • Starts with "AVSERVE" or "avserve2.exe"

      • Starts with "skynetave.exe"

      • Ends with "_UP.exe"
  • Click End Process.


  • Continue the End Process until you make sure that there are no such items (AVSERVE or avserve2.exe, skynetave.exe, _UP.exe) available in the Process task.
  • Install the latest critical updates to prevent your computer from security vulnerabilities.
  • Remove all the worms by using your anti-virus software by updating the latest antivirus definitions and perform virus scan.

Now your computer is clean and protected from worms and viruses.

Note: If the above solution does not work then contact Microsoft and your anti-virus software vendor for additional assistance.


Back to top
copyright © 2007, IPTouch, Inc.